Chip, encoding device, authentication data updating system and method
By designing a frozen and unfrozen authentication data mechanism in the chip, combined with the unfrozen instructions and encryption/decryption mechanisms of the encoding device, the problems of low efficiency and poor security in chip authentication data updates are solved, and a safe and efficient update process is achieved.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- APEX MICROELECTRONICS CO LTD
- Filing Date
- 2022-04-28
- Publication Date
- 2026-07-21
AI Technical Summary
Existing technologies for chip authentication data updates are characterized by low efficiency, poor security, and cumbersome operation, resulting in slow data writing rates, long processing times, and the risk of data leakage.
A chip design is used to store multiple sets of authentication data, some of which are in a frozen state. They can only be unfrozen and set to an accessible state by unfreezing commands outside the encoding device. The host cannot directly trigger changes to the frozen data. Combined with encryption and decryption mechanisms, data security is ensured.
It enables secure, efficient, and convenient updates of chip certification data, reduces logistics turnaround time, lowers the risk of data leakage, and improves update efficiency.
Smart Images
Figure CN117813202B_ABST
Abstract
Description
[0001] This application claims priority to Chinese Patent Application No. 202210367809.2, filed with the State Intellectual Property Office of China on April 8, 2022, entitled "A Chip and a System for Updating Authentication Data of a Chip", and to PCT International Application No. PCT / CN2022 / 089959, filed with the State Intellectual Property Office of China on April 28, 2022, entitled "A Chip, Encoding Device, Electronic Device, System and Method for Updating Authentication Data", the entire contents of which are incorporated herein by reference. Technical Field
[0002] This application relates to the field of communication technology, and more specifically to a chip, encoding device, authentication data updating system and method. Background Technology
[0003] To enhance the features of a host computer, it is often used in conjunction with peripheral accessories. When these accessories are used with the host computer, the host computer usually needs to authenticate the origin of the accessories. These accessories often include chips for authentication, which store authentication data.
[0004] For security reasons, the host frequently changes and upgrades its authentication methods. For example, it updates its accepted authentication data periodically and sets some or enabled authentication data as untrusted. Therefore, the chips on the accessories also need to adaptively and frequently update the authentication data they store.
[0005] The current process of updating chip certification data involves distributors rewriting complete data (including the chip's program and data, which includes two main categories: basic data and certification data) onto commercially available accessories (or chips). Distributors use encoding devices provided by the manufacturer to rewrite the basic data and new certification data onto the chip. To ensure data security and prevent the leakage of certification data stored on the encoding devices, manufacturers have implemented multiple encryption and decryption barriers. Furthermore, the rewriting process employs complex and lengthy encryption and verification algorithms, resulting in slow data writing speeds and significant time consumption. In addition, manufacturers need to flash the latest multiple sets of certification data onto the encoding devices before distributors can use them to rewrite the complete data onto the chip, a process that requires considerable logistical turnaround time. Moreover, providing the encoding devices containing the chip's basic data and multiple sets of certification data to distributors also carries the potential for leakage of the chip's basic data and certification data.
[0006] Therefore, a safer, more efficient, and more convenient solution for updating chip certification data is needed. Summary of the Invention
[0007] In view of this, this application provides a chip, encoding device, and authentication data update system and method to solve the problems of low update efficiency, poor security, and cumbersome operation of authentication data in chips in the prior art.
[0008] In a first aspect, embodiments of this application provide a chip for host authentication, comprising:
[0009] The storage section is used to store a first type of authentication data group, wherein the authentication data in the first type of authentication data group is in a frozen state, and the first type of authentication data group includes at least one type of authentication data.
[0010] The first interface module is used to receive unfreeze commands;
[0011] The processing module is configured to set the first type of authentication data group as the second type of authentication data group according to the unfreezing instruction, wherein the authentication data in the second type of authentication data group is in a unfrozen state.
[0012] Authentication data that is in a thawed state can be set to an accessible state according to the instructions output by the host, while authentication data that is in a frozen state cannot be set to an accessible state according to the instructions output by the host.
[0013] In one possible implementation, the first interface module is further configured to send first target authentication data to the host after receiving the authentication data access instruction sent by the host, wherein the first target authentication data is authentication data in the second authentication data group that is in an accessible state.
[0014] In one possible implementation, the processing module is further configured to send second target authentication data to the host if a preset response characteristic is detected. The second target authentication data is authentication data in the second type of authentication data group that is in an accessible state, or authentication data that has been adjusted from an inaccessible state to an accessible state.
[0015] In one possible implementation, the processing module is further configured to adjust the access status of the first target authentication data from an accessible state to an inaccessible state if a preset response characteristic is detected.
[0016] In one possible implementation, the storage portion is specifically used to store N first-type authentication data groups, each of which includes at least one authentication data, where N ≥ 2.
[0017] In one possible implementation, the first interface module is specifically used to receive the target group unfreezing instruction;
[0018] The processing module is specifically used to set the target first authentication data group in the N first authentication data groups as the second authentication data group according to the target group unfreezing instruction, wherein different target group unfreezing instructions correspond to different target first authentication data groups.
[0019] In one possible implementation, the first interface module is specifically used to receive a defreezing command sent by an encoding device, wherein the encoding device and the host are different devices.
[0020] In one possible implementation, the processing module is further configured to set the authentication data in other second authentication data groups to an inaccessible state after setting the first authentication data group to the second authentication data group.
[0021] In one possible implementation, setting the authentication data in the other second authentication data group to an inaccessible state includes:
[0022] Delete, freeze, or modify the authentication data in other second-type authentication data groups.
[0023] In one possible implementation, the first interface module is specifically used to receive the encrypted information of the unfreezing command;
[0024] The processing module is specifically used to decrypt the encrypted information of the unfreezing command to obtain the plaintext information of the unfreezing command, and set the first type of authentication data group as the second type of authentication data group according to the plaintext information of the unfreezing command.
[0025] In one possible implementation, the unfreezing instruction is a decryption key, and the authentication data in the first authentication data group is encrypted authentication data;
[0026] The processing module is specifically used to decrypt the encrypted authentication data in the first authentication data group according to the decryption key to obtain a second authentication data group, wherein the second authentication data group includes the decrypted authentication data.
[0027] Secondly, embodiments of this application provide an encoding device, including:
[0028] The second interface module is used to send a defreezing command to the chip, the defreezing command being used to instruct the chip to set the first authentication data group to the second authentication data group;
[0029] In this configuration, the authentication data in the first authentication data group is in a frozen state, and the authentication data in the second authentication data group is in a thawed state. The first authentication data group includes at least one authentication data. The authentication data in the thawed state can be set to an accessible state according to the instructions output by the host, while the authentication data in the frozen state cannot be set to an accessible state according to the instructions output by the host.
[0030] In one possible implementation, the second interface module is specifically used to send a target group unfreezing instruction to the chip, the target group unfreezing instruction being used to instruct the chip to set the target first authentication data group in M first authentication data groups as the second authentication data group, where M≥1.
[0031] Thirdly, embodiments of this application provide an authentication data update system, including the chip described in any of the first aspects and the encoding device described in any of the second aspects, wherein the chip and the encoding device are communicatively connected.
[0032] Fourthly, embodiments of this application provide an electronic device, including a host and a chip as described in any of the first aspects, wherein the host and the chip are communicatively connected.
[0033] In one possible implementation, the host is an image forming apparatus and the chip is a consumable chip.
[0034] Fifthly, embodiments of this application provide a method for updating authentication data, applied to a chip, wherein the chip stores a first authentication data group, the authentication data in the first authentication data group is in a frozen state, and the first authentication data group includes at least one authentication data, the method comprising:
[0035] Receive unfreeze command;
[0036] According to the unfreezing instruction, the first type of authentication data group is set as the second type of authentication data group, and the authentication data in the second type of authentication data group is in a unfrozen state;
[0037] Authentication data that is in a thawed state can be set to an accessible state according to the instructions output by the host, while authentication data that is in a frozen state cannot be set to an accessible state according to the instructions output by the host.
[0038] In one possible implementation, the chip stores M first authentication data groups, each of which includes at least one authentication data, where M ≥ 1;
[0039] The receiving of the unfreezing instruction specifically includes: receiving the target group unfreezing instruction;
[0040] The step of setting the first type of authentication data group as the second type of authentication data group according to the unfreezing instruction specifically includes: setting the target first type of authentication data group among the M first type of authentication data groups as the second type of authentication data group according to the target group unfreezing instruction.
[0041] In one possible implementation, after setting the first authentication data group as the second authentication data group, the method further includes:
[0042] Set the authentication data in the other second authentication data group to an inaccessible state.
[0043] Sixthly, embodiments of this application provide a chip for host authentication, including a storage section for storing authentication data, wherein accessible authentication data is first authentication data; characterized in that,
[0044] When the chip detects a preset response characteristic, the accessible authentication data is changed to second authentication data, which is different from the first authentication data.
[0045] After the chip receives the unfreeze command, the accessible authentication data changes the third authentication data, which is different from the second data. The unfreeze command is issued by an encoding device outside the host.
[0046] In one possible implementation, the third authentication data is in a frozen state before receiving the unfreezing instruction.
[0047] The solution provided in this application embodiment can update chip certification data in a relatively safe, efficient and convenient manner. Attached Figure Description
[0048] To more clearly illustrate the technical solutions of the embodiments of this application, the drawings used in the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of this application. For those skilled in the art, other drawings can be obtained based on these drawings without creative effort.
[0049] Figure 1 This is a schematic diagram of an application scenario provided by an embodiment of this application;
[0050] Figure 2 A structural block diagram of a chip provided in an embodiment of this application;
[0051] Figure 3 This is a structural block diagram of another chip provided in an embodiment of this application;
[0052] Figure 4A structural block diagram of an encoding device provided in an embodiment of this application;
[0053] Figure 5 A structural block diagram of an authentication data update system provided in this application embodiment;
[0054] Figure 6 This application provides a schematic diagram illustrating the principle of accessing authentication data in an embodiment.
[0055] Figure 7 This is a schematic diagram illustrating another principle of accessing authentication data provided in an embodiment of this application;
[0056] Figure 8 This is a flowchart illustrating a method for updating authentication data provided in an embodiment of this application. Detailed Implementation
[0057] To better understand the technical solution of this application, the embodiments of this application will be described in detail below with reference to the accompanying drawings.
[0058] It should be understood that the described embodiments are merely some, not all, of the embodiments in this application. All other embodiments obtained by those skilled in the art based on the embodiments in this application without inventive effort are within the scope of protection of this application.
[0059] The terminology used in the embodiments of this application is for the purpose of describing particular embodiments only and is not intended to be limiting of this application. The singular forms “a,” “the,” and “the” used in the embodiments of this application and the appended claims are also intended to include the plural forms unless the context clearly indicates otherwise.
[0060] It should be understood that the term "and / or" used in this article is merely a description of the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent: A existing alone, A and B existing simultaneously, or B existing alone. Additionally, the character " / " in this article generally indicates that the preceding and following related objects have an "or" relationship.
[0061] See Figure 1 This is a schematic diagram illustrating an application scenario provided by an embodiment of this application. For example... Figure 1 As shown, the electronic device includes a host and a chip, which can be a chip on an accessory used with the host. When the accessory is installed on the host, the host and the chip are communicatively connected. This communication connection can be via contacts, an antenna, or a coil. For example, the host can be a computer, mobile phone, tablet computer, image forming apparatus, etc., and the accessory can be a camera, USB memory, battery, data cable, charger, docking station, printing consumable box, etc.
[0062] The chip involved in this application is an electronic storage chip used in accessories for providing identity verification. The chip typically stores authentication data, and the host verifies the chip's identity based on this stored authentication data. Therefore, the chip in this application is a chip used for host authentication. For security reasons, hosts frequently change and upgrade their authentication methods; for example, they update their accepted authentication data periodically and set enabled or certain authentication data as untrusted. Therefore, the chip in the accessory also needs to adaptively and frequently update its stored authentication data.
[0063] An encoding device is a device that can write data into a chip, allowing the authentication data in the chip to be updated. Specifically, when it is necessary to update the authentication data in the chip, the chip is connected to the encoding device (this communication connection can be via contacts, antennas, or coils), and the encoding device updates the authentication data in the chip so that the chip can be identified by the host. For example, this encoding device can be a writing device or resetter for programming the chip, or it can be a terminal capable of executing program instructions, such as a mobile phone or tablet computer.
[0064] However, the current process of updating chip certification data involves distributors rewriting complete data (including the chip's program and data, which includes two main categories: basic data and certification data) onto commercially available accessories (or chips). Distributors use encoding devices provided by the manufacturer to rewrite the basic data and new certification data onto the chip. To ensure data security and prevent the leakage of certification data stored on the encoding devices, manufacturers have implemented multiple encryption and decryption barriers. Furthermore, the rewriting process employs complex and lengthy encryption and verification algorithms, resulting in slow data writing speeds and significant time consumption. In addition, manufacturers need to flash the latest sets of certification data onto the encoding devices before distributors can use them to rewrite the complete data onto the chip, a process that requires considerable logistical turnaround time. Moreover, providing the encoding devices containing the chip's basic data and multiple sets of certification data to distributors also carries the potential for leakage of the chip's basic data and certification data.
[0065] To address the aforementioned issues, this application provides a relatively safe, efficient, and convenient solution for updating chip authentication data.
[0066] To facilitate understanding, the concepts involved in this application will be introduced below.
[0067] The first type of authentication data group refers to an authentication data group in a frozen state. Each first type of authentication data group includes at least one authentication data item. For example, each first type of authentication data group may include 1, 2, 3, 4, or 5 authentication data items. The number of authentication data items in different first type of authentication data groups may be equal or unequal.
[0068] The second type of authentication data group refers to the authentication data group that is in a thawed state. Each second type of authentication data group includes at least one authentication data piece. For example, each first type of authentication data group includes 1, 2, 3, 4, or 5 authentication data pieces, etc. The number of authentication data pieces in different second type of authentication data groups can be equal or unequal.
[0069] A frozen state refers to a state in which the host cannot access the authentication data. In other words, the host has no opportunity to access the authentication data that is in a frozen state. Authentication data in a frozen state cannot be set to an accessible state according to the instructions output by the host.
[0070] The unfrozen state refers to a state in which the authentication data can be accessed by the host. In other words, the authentication data in the unfrozen state can be set to an accessible state according to the instructions output by the host.
[0071] It should be noted that authentication data in a thawed state can also be in an inaccessible state, but this inaccessible state can be adjusted to an accessible state according to the instructions output by the host; authentication data in a frozen state is always inaccessible, and this inaccessible state cannot be adjusted to an accessible state according to the instructions output by the host.
[0072] See Figure 2 This is a structural block diagram of a chip provided in an embodiment of this application. Figure 2As shown, the chip includes a first interface module, a processing module, and a storage section. The storage section stores authentication data such as first authentication data, second authentication data, and third authentication data. These three authentication data are distinct from each other. One of the first and second authentication data is accessible (either the first is accessible and the second is inaccessible, or vice versa). The third authentication data is inaccessible, for example, in a frozen state. The accessible and inaccessible states are relative to the host accessing the chip. Accessible authentication data can be accessed by the host; inaccessible authentication data cannot be accessed by the host. The host cannot access inaccessible authentication data using regular access commands, but can access accessible authentication data. Only when the chip actively makes inaccessible authentication data accessible can the host access this data. The storage section can also store other information related to the chip. The first interface module can specifically be a contact point, antenna, or coil, used to connect to the host or encoding device and receive communication signals from the host or encoding device. The processing module refers to a functional unit with data processing capabilities, used to perform related data processing during the authentication data update process. In one possible implementation, the third authentication data, which is in an inaccessible state, is handled as follows: when the chip receives a unfreeze command, the processing module sets the third authentication data to an unfrozen state, and can further set it to an accessible state, meaning the accessible authentication data can modify the third authentication data. Additionally, the processing module can further set the first and second authentication data to an inaccessible state. Thus, when the host wants to access the chip's authentication data, the chip outputs the third authentication data through the first interface module, instead of the first and second authentication data. Setting the first and second authentication data to an inaccessible state allows for encryption, deletion, modification, or freezing of the first and second authentication data.
[0073] In one embodiment, the first authentication data, the second authentication data, and the third authentication data respond to the same instruction or access address. That is, the first authentication data, the second authentication data, and the third authentication data are all mapped to the same instruction or access address. For a given access instruction, only one authentication data can be accessed by the host. When the host can access the authentication data through the same instruction, it is necessarily in an accessible state, while the other two unaccessed data are necessarily in an inaccessible state.
[0074] The aforementioned unfreezing command is transmitted to the chip through an encoding device outside the host computer. Therefore, the host computer will not issue unfreezing commands to the chip. The encoding device can issue unfreezing commands to the chip at a predetermined time according to actual needs. Chip manufacturers can obtain information through big data monitoring, distributor feedback, or customer complaints to determine whether the certification data provided by chips sold on the market has been marked as untrusted certification data by the host computer (commonly known as blacklisting, such as adding it to the blacklist of the host computer or the server connected to the host computer).
[0075] When authentication data is blacklisted by a host, the manufacturer can send an unfreezing command from the server to the coding device held by the distributor via a network link. The distributor then uses the coding device to issue unfreezing commands to the accessories and chips circulating in the market or stored in the warehouse. Upon receiving the unfreezing command, the chip will respond accordingly. Chips using this application have multiple sets of hidden authentication data that are not enabled. Upon receiving the corresponding unfreezing command, a portion of this authentication data can be made accessible, allowing the output of authentication data that has not yet been blacklisted by the host, thus meeting the authentication requirements of the accessories. This unblacklisted authentication data ensures the normal use of the accessories, resolving the problem of accessories being unusable due to blacklisted authentication data.
[0076] The aforementioned first and second authentication data are described below. These two authentication data can be accessed by the host in either way. Furthermore, these two authentication data can be triggered by the host's access commands to switch between their accessible and inaccessible states. In other words, whether the host accesses the first or second authentication data through the chip's first interface module depends on whether either data is in an accessible state. In one possible implementation, only one of these two data is in an accessible state; for example, the first authentication data is accessible while the second authentication data is inaccessible. When the host accesses the chip's first authentication data and determines that it is untrusted, the chip can no longer cooperate with the host. At this time, the chip needs to set the second authentication data to accessible and the first authentication data to inaccessible. Then, when the host accesses the chip's authentication data again, the chip outputs the second authentication data through the first interface module, not the first authentication data. If the second authentication data is authenticated by the host, then the accessory with the chip can continue to be used with the host. As can be seen, the chip has the function of determining whether the sent authentication data is recognized by the host (implemented through logic circuits or software). When the chip determines that the sent authentication data is not recognized by the host, it can select another authentication data between the first authentication data and the second authentication data to send to the host.
[0077] The processing module determines whether the sent authentication data is recognized by the host by analyzing the type, order, and content of the instructions received from the host, or other characteristics of the host's response. Therefore, the host can interfere with the chip's decision-making process by issuing instructions, causing the chip to send either the first or second authentication data. In other words, if the host manufacturer or other competitors understand the chip's decision-making logic, they can deceive the chip into believing that its first or second authentication data is not recognized, thus prompting the chip to set another authentication data as accessible. This allows them to obtain other authentication data stored in the chip in advance. Clearly, in such a scenario, all authentication data stored in the chip is at risk of premature leakage.
[0078] Therefore, unlike the management methods of the first and second authentication data in this application, the third authentication data needs to be unfrozen by an encoding device other than the host before it can be set to be accessible. This prevents the third authentication data from being obtained in advance by the host manufacturer or the applicant's competitors, who could then blacklist it, ultimately rendering the chip unusable. It is evident that the first and second authentication data in this application can be triggered by instructions output by the host, switching their access states. The chip can choose to output either the first or second authentication data. However, the third authentication data stored in the chip will not be triggered by instructions output by the host to change from a frozen state to an accessible state. In some possible implementations, the authentication data in the chip is controlled in units of "groups." For ease of explanation, the authentication data group in a frozen state is referred to as the first authentication data group, and the authentication data group in a unfrozen state (i.e., not in a frozen state) is referred to as the second authentication data group. Each authentication data group (either the first or second authentication data group) contains at least one piece of authentication data. It is understandable that the authentication data in the first authentication data group is backup authentication data, while the authentication data in the second authentication data group is the data that can be used for identity authentication.
[0079] In one possible implementation, to facilitate chip authentication, the second authentication data set includes at least one authentication data item that is in an accessible state. For example, in Figure 2 In the implementation shown, the first authentication data and the second authentication data form a second authentication data group. At least one of the first authentication data and the second authentication data is in an accessible state (either the first authentication data or the second authentication data is in an accessible state). In other words, the accessible authentication data is either the first authentication data or the second authentication data.
[0080] In one possible implementation, upon receiving an unfreeze command, all authentication data in the first authentication data group is unfrozen according to the command, effectively setting the first authentication data group as the second authentication data group. At this point, authentication can be performed using the newly unfrozen authentication data. To avoid interference from other unfrozen authentication data, in another possible implementation, after setting the first authentication data group as the second authentication data group, authentication data in other second authentication data groups can be set to an inaccessible state.
[0081] For example, in Figure 2 In the implementation shown, the third authentication data and other data form a first authentication data group, and the first authentication data and second authentication data form a second authentication data group. When the first authentication data and second authentication data fail authentication, the encoding device sends a defreezing command to the chip, thereby defreezing the third authentication data and other data in the first authentication data group. At this time, the defreezed third authentication data and other data become the second authentication data group (i.e., the aforementioned defreezing command defreezes the first authentication data group into the second authentication data group). During the authentication process, to avoid interference from the first and second authentication data that fail authentication, the first and second authentication data can be set to an inaccessible state, that is, the authentication data in other second authentication data groups can be set to an inaccessible state. Specifically, "setting the authentication data in other second authentication data groups to an inaccessible state" can mean deleting, freezing, or modifying the authentication data in other second authentication data groups.
[0082] It should be noted that in some possible implementations, the storage section may only store the first authentication data set and not the second authentication data set. For example, when the chip is first manufactured, only the first authentication data set is configured in the chip. After receiving the chip, the distributor first unfreezes the authentication data in the first authentication data set before it can be installed in the host for use.
[0083] To improve the chip's ability to cope with host upgrades, more authentication data can be stored in the chip. Different authentication data can be unfrozen using different unfreezing commands, thus preventing the host from actively triggering the blacklisting of authentication data.
[0084] In one possible implementation, N first-type authentication data groups, where N ≥ 2, can be stored in the chip. For example, N can be 2, 3, 4, 6, etc. Different unfreeze instructions can selectively unfreeze one or more first-type authentication data groups. That is, there is a correspondence between the unfreeze instructions and the authentication data groups. For ease of explanation, the corresponding unfreeze instructions and authentication data groups are referred to as the target group unfreeze instruction and the target first-type authentication data group, respectively. When the chip receives the target group unfreeze instruction, it can unfreeze the authentication data in the target first-type authentication data group from the N first-type authentication data groups, i.e., set the target first-type authentication data group as the second-type authentication data group. For example, the chip stores three first-type authentication data groups: first-type authentication data group A, first-type authentication data group B, and first-type authentication data group C. The target group unfreeze instruction corresponds to first-type authentication data group B; that is, first-type authentication data group B is the target first-type authentication data group. When the chip receives the target group unfreeze instruction, it sets first-type authentication data group B as the second-type authentication data group.
[0085] See Figure 3 This is a structural block diagram of another chip provided in an embodiment of this application. Figure 3 As shown, the chip 100 includes a first interface module 110, a processing module 130, and a storage section 120. It is related to... Figure 2 The difference lies in that the storage portion 120 of chip 100 stores three different sets of authentication data. The first set of authentication data 121 includes first and second authentication data; the second set of authentication data 122 includes third and fourth authentication data; and the third set of authentication data 123 includes fifth and sixth authentication data. The first set of authentication data 121 does not need to be unfrozen, while the second and third sets are frozen. The second set of authentication data 122 can be unfrozen by the chip upon receiving a first unfreeze command; the third set of authentication data 123 can be unfrozen by the chip upon receiving a second unfreeze command. In other words, the first set of authentication data 121 is the second type of authentication data set, and the second and third sets are the first type of authentication data set. The first unfreeze command is the target group unfreeze command corresponding to the second set of authentication data 122, and the second unfreeze command is the target group unfreeze command corresponding to the third set of authentication data 123.
[0086] To prevent competitors from using the first unfreezing command to unfreeze the third set of authentication data (123), the second unfreezing command should ideally be different from the first. This prevents a single unfreezing command from unfreezing all frozen authentication data stored in the chip. Furthermore, the aforementioned first and second unfreezing commands differ from the access commands sent to the chip by the host, which include read commands, write commands, authentication commands, etc. The chip can identify and determine whether the received command is a regular access command or an unfreezing command. If it is an unfreezing command, it unfreezes the corresponding authentication data accordingly.
[0087] Authentication data that is in a frozen state needs to be unfrozen by an encoding device other than the host before it can be made accessible. Therefore, a frozen state is also a type of inaccessible state.
[0088] In one possible implementation, the authentication data in the frozen state is encrypted. Therefore, the decryption key for decrypting the encrypted authentication data can be transmitted in the unfreeze command. When the chip receives the unfreeze command, it can extract the decryption key from the command and use it to decrypt the encrypted authentication data (i.e., unfreeze the frozen authentication data). This results in decrypted authentication data that conforms to the host's reading method and mechanism; the decrypted authentication data is the unfrozen authentication data.
[0089] When authentication data is unfrozen, it can be in an accessible or inaccessible state, depending on the chip's configuration. For example... Figure 3 When the second set of authentication data 122 is unfrozen, both the third and fourth authentication data can be triggered by the host's regular access commands to change from an inaccessible state to an accessible state. Since the host only needs the chip to reply with one authentication data each time it authenticates, the chip can set only the unfrozen third or fourth authentication data to an accessible state, while keeping the other inaccessible or setting it to an inaccessible state. Only when the chip determines that the sent authentication data is not recognized by the host will it set the other authentication data to an accessible state, while setting the unrecognized authentication data to an inaccessible state. In other words, the unfrozen second set of authentication data includes at least one authentication data in an accessible state.
[0090] In one possible implementation, when the chip sends two authentication data sets from the second authentication data set to the host, and the host fails to recognize either, the user needs to use an encoding device to issue a second unfreeze command to the chip, thereby unfreezing the third authentication data set 123 stored in the chip. The method by which the chip unfreezes the fifth and sixth authentication data sets in the third authentication data set 123, and sets them to an accessible state, is the same as that for the second authentication data set 122, and will not be described again here.
[0091] In one possible implementation, after the chip receives an authentication data access command from the host, the chip replies with authentication data (for ease of explanation, this authentication data will be referred to as the first target authentication data). It can be understood that the first target authentication data should be authentication data in an accessible state within the second set of authentication data. If the first target authentication data can be recognized by the host, the chip can function normally; if the first target authentication data cannot be recognized by the host, it needs to resend authentication data to the host (this resent authentication data will be referred to as the second target authentication data). This second target authentication data is authentication data in an accessible state within the second set of authentication data, or authentication data that has been adjusted from an inaccessible state to an accessible state. For example, in... Figure 3 In the implementation shown, both the first authentication data and the second authentication data are in an accessible state. When the chip receives an authentication data access command from the host, the chip sends the first authentication data (first target authentication data) to the host. If the first authentication data cannot be recognized by the host, the chip sends the second authentication data (second target authentication data, which is also authentication data in an accessible state) to the host. For example, in... Figure 3 In the implementation shown, the first authentication data is in an accessible state, while the second authentication data is in an inaccessible state. When the chip receives an authentication data access instruction from the host, the chip sends the first authentication data (first target authentication data) to the host. If the first authentication data cannot be recognized by the host, the chip adjusts the access status of the second authentication data from inaccessible to accessible, and then sends the second authentication data to the host (i.e., the second target authentication data is the authentication data that has been adjusted from inaccessible to accessible).
[0092] Understandable Figure 3 In this document, each set of authentication data is exemplarily described as two. Those skilled in the art will understand that each set of authentication data may include one, two, three, or more authentication data sets, and can be configured according to actual needs. Similarly, the chip may include, in addition to... Figure 2 In addition to the three sets of authentication data, it can also include 2, 4, 5 or more sets of authentication data, which is not limited here.
[0093] The authentication data referred to in this application may include one or more of the following: chip serial number, serial number, consumable serial number, authentication code, toner serial number, ink serial number, digital signature, seed data, or verification data; it may also include related data, for example, if the serial number is related to the production date, the authentication data may include not only the serial number but also the production date information related to it.
[0094] See Figure 4 This is a structural block diagram of an encoding device provided in an embodiment of this application. Figure 4 As shown, the encoding device 200 includes a second interface module 210, which is used to send a defreezing command to the chip, thereby causing the chip to set the first authentication data group as the second authentication data group. In specific implementation, the second interface module 210 is used to send a target group defreezing command to the chip, thereby causing the chip to set the target first authentication data group among M first authentication data groups as the second authentication data group, where M≥1.
[0095] Corresponding to the above embodiments, this application also provides an authentication data update system.
[0096] See Figure 5 This is a structural block diagram of an authentication data update system provided in an embodiment of this application. Figure 5 As shown, the system includes the encoding device, chip, and connector described in the above embodiments. The connector connects the encoding device and the chip. Depending on the chip type, the connector can be a wired connector, such as a test head including probes or pins; or it can be a wireless connector, such as an antenna or coil for wireless connection. When the connector wirelessly connects to the chip, its function can be integrated into the encoding device, eliminating the need for a separate connector. Therefore, the system for updating chip authentication data can consist only of the encoding device and the chip.
[0097] Specifically, the encoding device may include a network interface for connecting to a server, which can be a wired or wireless network interface. Depending on the usage environment, the encoding device can be configured with either a wired or wireless network interface, or it can include both. The server generates, stores, and issues unfreezing commands, pushing corresponding unfreezing commands to the encoding device based on a set plan or changes in the host. Since the unfreezing command can only unfreeze a portion of the chip's authentication data, the chip, upon receiving the command, will make that portion of the authentication data accessible. Therefore, the unfreezing command can be transmitted from the encoding device to the chip in plaintext, which improves the efficiency of chip upgrades. In another embodiment, the unfreezing command can be pushed in a relatively secure manner, such as using asymmetric encryption to encrypt the unfreezing command to be transmitted once or multiple times (e.g., using public key encryption). Thus, the unfreezing command transmitted by the server is ciphertext information. When the chip receives this ciphertext information through the encoding device, for example, by decrypting it with a private key, the chip obtains the unfreezing command in plaintext.
[0098] Understandably, when the chip receives the unfreeze command transmitted from the server through the encoding device, in addition to unfreezing the frozen authentication data, it also has another purpose: to modify the authentication data that was originally output to the outside world to be inaccessible, because the authentication data that was originally output to the outside world may have been blacklisted by the host.
[0099] Authentication data that is frozen is definitely inaccessible, and cannot be accessed by the host through normal access unless an unfreezing command is sent by an encoding device other than the host. Conversely, unfrozen authentication data is accessible to the host through normal access.
[0100] by Figure 3 Taking the second set of authentication data 122 as an example, when the chip does not receive the first unfreeze command, both the third and fourth authentication data are frozen and inaccessible to the host's normal access. Once the chip receives the first unfreeze command, it can unfreeze the third and fourth authentication data, allowing the host's normal access to access them. When the host requests access to the authentication data, the chip can select one of the third and fourth authentication data to send to the host. For example, the chip can choose sequentially, first setting the third authentication data to an accessible state. Thus, when the host requests access to the authentication data, the chip will reply with the third authentication data. When the third authentication data sent by the chip is not recognized by the host, the host will exhibit some response characteristics that the chip can recognize after reading the third authentication data (including the type, order, and content of the commands received from the host). Therefore, the chip can determine whether the third authentication data has been recognized by the host based on these response characteristics. When the chip determines that the host has not recognized the third authentication data based on these response characteristics (which can be defined as preset response characteristics when the host does not recognize authentication data), it proactively sets the fourth authentication data to an accessible state and the third authentication data to an inaccessible state. Similarly, the chip uses a similar judgment method when choosing whether to reply with the first or second authentication data. When the chip does not detect the preset response characteristics, it outputs the first authentication data, that is, the accessible authentication data is the first authentication data; when the chip detects the preset response characteristics, it outputs the second authentication data, that is, the accessible authentication data changes to the second authentication data.
[0101] When implementing the setting of authentication data to an accessible or inaccessible state, the chip can employ various implementation methods. For example... Figure 6As shown, when the chip controls which authentication data is accessible by changing the access pointer, it can change the access pointer from pointing to the third authentication data to pointing to the fourth authentication data. This sets the third authentication data to inaccessible and the fourth authentication data to accessible. Therefore, when the host reads the chip's authentication data via an access command, it will read the accessible fourth authentication data. Assuming the third authentication data is stored at address 0xF0 and the fourth authentication data is stored at address 0xF1, setting the fourth authentication data to an accessible state only requires modifying the access pointer; the contents stored at addresses 0xF0 and 0xF1—that is, the physical locations of the third and fourth authentication data—do not need to be changed.
[0102] In another embodiment, such as Figure 7 As shown, when the chip controls which authentication data is accessible by loading authentication data into the access register, the fourth authentication data can be copied and loaded into the access register, while the third authentication data, originally stored in the access register, will be deleted. In this way, the third authentication data is set to inaccessible, and the fourth authentication data is set to accessible. Therefore, when the host reads the chip's authentication data via an access instruction, it will read the accessible fourth authentication data. The physical locations where the third and fourth authentication data are stored do not need to be changed; only the contents loaded into the access register need to be modified.
[0103] Since the unfreezing command does not contain authentication data, it can be transmitted from the encoding device to the chip without encryption, thus improving the efficiency of the encoding device in sending the unfreezing command to the chip. Encrypted ciphertext typically involves redundant processing of the plaintext, significantly increasing the amount of information to be transmitted and reducing the efficiency of transmission to the chip.
[0104] In summary, the solution provided in this application embodiment can update chip certification data in a relatively safe, efficient, and convenient manner.
[0105] In one possible implementation, the chip's storage section can use common non-volatile memory, such as EPROM, EEPROM, FLASH, ferroelectric memory, phase-change memory, etc., or it can use a volatile memory plus a power supply, such as SRAM + battery or capacitor, DRAM + battery or capacitor.
[0106] Corresponding to the above embodiments, this application also provides a method for updating authentication data.
[0107] See Figure 8This is a flowchart illustrating a method for updating authentication data provided in an embodiment of this application. This method can be applied to the chip described in the above embodiments, such as... Figure 8 As shown, it mainly includes the following steps.
[0108] Step S801: Receive the defrost command.
[0109] Step S802: According to the unfreezing instruction, the first type of authentication data group is set as the second type of authentication data group, and the authentication data in the second type of authentication data group is in a unfrozen state.
[0110] Authentication data that is in a thawed state can be set to an accessible state according to the instructions output by the host, while authentication data that is in a frozen state cannot be set to an accessible state according to the instructions output by the host.
[0111] In one possible implementation, the chip stores N first-type authentication data groups, each of which includes at least one authentication data, where N ≥ 2; receiving the unfreezing instruction specifically includes receiving a target group unfreezing instruction; setting the first-type authentication data group as a second-type authentication data group according to the unfreezing instruction specifically includes setting a target first-type authentication data group among the N first-type authentication data groups as a second-type authentication data group according to the target group unfreezing instruction.
[0112] In one possible implementation, after setting the first authentication data group as the second authentication data group, the method further includes setting the authentication data in other second authentication data groups to an inaccessible state.
[0113] The method provided in this application embodiment can update the chip's certification data in a relatively safe, efficient, and convenient manner.
[0114] For details of the embodiments of this method, please refer to the description of the above embodiments. For the sake of brevity, they will not be repeated here.
[0115] In a specific implementation, this application also provides a computer storage medium, wherein the computer storage medium may store a program, and the program, when executed, may include some or all of the steps provided in the various embodiments of this application. The storage medium may be a magnetic disk, optical disk, read-only memory (ROM), or random access memory (RAM), etc.
[0116] In a specific implementation, this application also provides a computer program product, which includes executable instructions that, when executed on a computer, cause the computer to perform some or all of the steps in the above method embodiments.
[0117] In this application embodiment, "at least one" refers to one or more, and "more than one" refers to two or more. "And / or" describes the relationship between related objects, indicating that three relationships can exist. For example, A and / or B can represent the existence of A alone, the simultaneous existence of A and B, or the existence of B alone. A and B can be singular or plural. The character " / " generally indicates that the preceding and following related objects have an "or" relationship. "At least one of the following" and similar expressions refer to any combination of these items, including any combination of single or plural items. For example, at least one of a, b, and c can represent: a, b, c, ab, ac, bc, or abc, where a, b, and c can be single or multiple.
[0118] Those skilled in the art will recognize that the units and algorithm steps described in the embodiments disclosed herein can be implemented using electronic hardware, computer software, or a combination of electronic hardware and software. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.
[0119] Those skilled in the art will understand that, for the sake of convenience and brevity, the specific working processes of the systems, devices, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.
[0120] In the several embodiments provided in this application, any function, if implemented as a software functional unit and sold or used as an independent product, can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or a part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.
[0121] The above description is merely a specific embodiment of this application. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this application should be included within the protection scope of this application. The protection scope of this application should be determined by the protection scope of the claims.
Claims
1. A chip for authentication by an image forming apparatus, characterized in that, include: The storage section is used to store a first type of authentication data group, wherein the authentication data in the first type of authentication data group is in a frozen state, and the first type of authentication data group includes at least one type of authentication data. The first interface module is used to receive unfreeze commands; The processing module is configured to set the first type of authentication data group as the second type of authentication data group according to the unfreezing instruction, wherein the authentication data in the second type of authentication data group is in a unfrozen state. Among them, authentication data in the thawed state can be set to an accessible state according to the instructions output by the image forming apparatus, while authentication data in the frozen state cannot be set to an accessible state according to the instructions output by the image forming apparatus. The first interface module is specifically used to receive a defrost command sent by the encoding device, wherein the encoding device and the image forming device are different devices; The first interface module is further configured to send first target authentication data to the image forming apparatus after receiving the authentication data access instruction sent by the image forming apparatus, wherein the first target authentication data is authentication data in the second type of authentication data group that is in an accessible state; The processing module is further configured to send second target authentication data to the image forming apparatus if a preset response characteristic is detected. The second target authentication data is authentication data in the second type of authentication data group that is in an accessible state, or authentication data that has been adjusted from an inaccessible state to an accessible state.
2. The chip according to claim 1, characterized in that, The processing module is further configured to, if a preset response characteristic is detected, adjust the access status of the first target authentication data from an accessible state to an inaccessible state.
3. The chip according to claim 1, characterized in that, The storage section is specifically used to store N first-type authentication data groups, each of which includes at least one authentication data, and N≥2.
4. The chip according to claim 3, characterized in that, The first interface module is specifically used to receive the target group unfreezing command; The processing module is specifically used to set the target first authentication data group in the N first authentication data groups as the second authentication data group according to the target group unfreezing instruction, wherein different target group unfreezing instructions correspond to different target first authentication data groups.
5. The chip according to claim 1, characterized in that, The unfreezing command is a decryption key, and the authentication data in the first authentication data group is encrypted authentication data; The processing module is specifically used to decrypt the encrypted authentication data in the first authentication data group according to the decryption key to obtain a second authentication data group, wherein the second authentication data group includes the decrypted authentication data.
6. An encoding device, characterized in that, The encoding device is used to communicate with the chip and update the authentication data in the chip. The encoding device includes: The second interface module, the encoding device is used to send a defreezing command to the chip through the second interface module, the defreezing command is used to instruct the chip to set the first authentication data group stored in the chip as the second authentication data group; In this configuration, the authentication data in the first authentication data group is in a frozen state, and the authentication data in the second authentication data group is in a thawed state. The first authentication data group includes at least one authentication data. The authentication data in the thawed state can be set to an accessible state according to the instructions output by the image forming apparatus, while the authentication data in the frozen state cannot be set to an accessible state according to the instructions output by the image forming apparatus.
7. The encoding device according to claim 6, characterized in that, The second interface module is specifically used to send a target group unfreezing instruction to the chip. The target group unfreezing instruction is used to instruct the chip to set the target first authentication data group in M first authentication data groups as the second authentication data group, where M≥1.
8. A system for updating authentication data, characterized in that, It includes the chip according to any one of claims 1-5, and the encoding device according to claim 6 or 7, wherein the chip and the encoding device are communicatively connected.
9. A method for updating authentication data, characterized in that, Applied to a chip, the chip storing a first authentication data set, wherein the authentication data in the first authentication data set is in a frozen state, and the first authentication data set includes at least one authentication data, the method comprising: Receive a defrost command, wherein the defrost command is issued by an encoding device other than the image forming apparatus; According to the unfreezing instruction, the first type of authentication data group is set as the second type of authentication data group, and the authentication data in the second type of authentication data group is in a unfrozen state; Among them, authentication data in the thawed state can be set to an accessible state according to the instructions output by the image forming apparatus, while authentication data in the frozen state cannot be set to an accessible state according to the instructions output by the image forming apparatus. The method further includes: After receiving the authentication data access instruction sent by the image forming apparatus, the first target authentication data is sent to the image forming apparatus. The first target authentication data is the authentication data in the second authentication data group that is in an accessible state. If a preset response characteristic is detected, second target authentication data is sent to the image forming apparatus. The second target authentication data is authentication data in the second type of authentication data group that is in an accessible state, or authentication data that has been adjusted from an inaccessible state to an accessible state.
10. The method according to claim 9, characterized in that, The chip stores M first-type authentication data groups, each of which includes at least one authentication data, where M≥1; The receiving of the unfreezing instruction specifically includes: receiving the target group unfreezing instruction; The step of setting the first type of authentication data group as the second type of authentication data group according to the unfreezing instruction specifically includes: setting the target first type of authentication data group among the M first type of authentication data groups as the second type of authentication data group according to the target group unfreezing instruction.
11. A chip for authentication by an image forming apparatus, comprising a first interface module, a processing module, and a storage section, wherein the storage section stores authentication data, of which first authentication data is accessible; characterized in that, When the chip detects a preset response characteristic, the accessible authentication data is changed to second authentication data, which is different from the first authentication data. The first authentication data and the second authentication data can be triggered by instructions output by the host. When the chip receives the unfreeze command, the accessible authentication data is changed to third authentication data, which is different from the first and second authentication data. The unfreeze command is issued by an encoding device other than the image forming apparatus, and the third authentication data cannot be triggered by commands output by the host.